Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: reacquire gw address after skb realloc
The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: retrieve ethhdr after potential skb realloc on RX
pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record's doc value into a generated triple-double-quoted…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request parameter…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
The flow is added to dev->twt_list before sending the agreement to the
firmware, but the error path leaves it linked while flowid_mask is
never set. The flow…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_conn: fix the SCO setup context lifetime
hci_setup_sync() queues a conn_handle_t with a NULL destroy callback, so
the context is only freed if hci_enhanced_setup_sync() actually runs. An
entry that is cancelled…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by interpolating the timezone request value without parameter binding. The timezone value can reach…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting them in a script context on an administrative page, allowing unauthenticated attackers to perform Stored Cross-Site…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
hci_conn::l2cap_data is accessed without locks in l2cap_disconn_ind via
hci_conn_timeout (disc_work) -> hci_proto_disconn_ind ->
l2cap_disconn_ind. This…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: reacquire gw address after skb realloc
The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: retrieve ethhdr after potential skb realloc on RX
pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record's doc value into a generated triple-double-quoted…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request parameter…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
The flow is added to dev->twt_list before sending the agreement to the
firmware, but the error path leaves it linked while flowid_mask is
never set. The flow…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_conn: fix the SCO setup context lifetime
hci_setup_sync() queues a conn_handle_t with a NULL destroy callback, so
the context is only freed if hci_enhanced_setup_sync() actually runs. An
entry that is cancelled…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by interpolating the timezone request value without parameter binding. The timezone value can reach…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting them in a script context on an administrative page, allowing unauthenticated attackers to perform Stored Cross-Site…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
hci_conn::l2cap_data is accessed without locks in l2cap_disconn_ind via
hci_conn_timeout (disc_work) -> hci_proto_disconn_ind ->
l2cap_disconn_ind. This…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki